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LOAD REGISTERS 
a(x), b(x) & INITIALIZE 

c(x)=0. 
PAD HIGH-ORDER BITS 

OF a(x) WITH 0 








SET 
i = T-1 










c(x) = Ai(x)b(x) mod p(x) 
+c(x)xn mod p(x) 






OUTPUT ^ 



^0M>Ai(x) .At-i(x) a(^) 



A(x)b(x) mod p(x) 



c(x)x" mod p(x) 



k 



XOR 



c(x) 



nG.6 
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FIG.7 



